Code injection

Sup before 0.13.2.1 and 0.14.x before 0.14.1.1 allows remote attackers to execute arbitrary commands via shell metacharacters in the filename of an email attachment...

UBUNTU-CVE-2013-4479

lib/sup/messagechunks.rb in Sup before 0.13.2.1 and 0.14.x before 0.14.1.1 allows remote attackers to execute arbitrary commands via shell metacharacters in the contenttype of an email attachment...

CVE-2013-4478

Sup before 0.13.2.1 and 0.14.x before 0.14.1.1 allows remote attackers to execute arbitrary commands via shell metacharacters in the filename of an email attachment...

CVE-2013-4479

lib/sup/messagechunks.rb in Sup before 0.13.2.1 and 0.14.x before 0.14.1.1 allows remote attackers to execute arbitrary commands via shell metacharacters in the contenttype of an email attachment...

CVE-2013-4479

CVE-2013-4479 affects the Sup email client: vulnerable component is lib/sup/message_chunks.rb. Exposed in versions before 0.13.2.1 and 0.14.x before 0.14.1.1, allowing remote attackers to execute arbitrary commands via shell metacharacters in the content_type of an email attachment. Impact is rem...

CVE-2013-4478

CVE-2013-4478 affects Sup versions prior to 0.13.2.1 and prior to 0.14.1.1, where remote attackers could execute arbitrary commands via shell metacharacters in the filename of an email attachment. The fixed releases are 0.13.2.1 and 0.14.1.1, per the descriptions in the connected records. Practic...

CVE-2013-4478

Sup before 0.13.2.1 and 0.14.x before 0.14.1.1 allows remote attackers to execute arbitrary commands via shell metacharacters in the filename of an email attachment...

CVE-2013-4479

lib/sup/messagechunks.rb in Sup before 0.13.2.1 and 0.14.x before 0.14.1.1 allows remote attackers to execute arbitrary commands via shell metacharacters in the contenttype of an email attachment...

Threat Outbreak Alert: Email Messages with Malicious Attachments on December 4, 2013

Medium Alert ID: 32007 First Published: 2013 December 4 16:01 GMT Version: 1 Summary Cisco Security has detected significant activity related to Portuguese-language spam email messages that claim to contain an attachment for the recipient. The text in the email message attempts to convince the...

Threat Outbreak Alert: Fake Payment Processing Notification Email Messages on November 29, 2013

Medium Alert ID: 31943 First Published: 2013 December 2 16:57 GMT Version: 1 Summary Cisco Security has detected significant activity related to spam email messages that claim to contain payment processing details for the recipient. The text in the email message attempts to convince the recipient...

Threat Outbreak Alert: Fake Product Request Email Messages on November 19, 2013

Medium Alert ID: 31825 First Published: 2013 November 19 20:47 GMT Version: 1 Summary Cisco Security has detected significant activity related to spam email messages that claim to contain a product request for the recipient. The text in the email message attempts to convince the recipient to open...

Threat Outbreak Alert: Fake Monthly Report Notification Email Messages on November 19, 2013

Medium Alert ID: 31827 First Published: 2013 November 19 17:48 GMT Version: 1 Summary Cisco Security has detected significant activity related to spam email messages that claim to contain a report from HM Revenue & Customs for the recipient. The text in the email message attempts to convince the...

Threat Outbreak Alert: Fake Company Financial Report Email Messages on November 15, 2013

Medium Alert ID: 31788 First Published: 2013 November 15 21:23 GMT Version: 1 Summary Cisco Security has detected significant activity related to spam email messages that claim to contain a financial report for the recipient. The text in the email message attempts to convince the recipient to ope...

Threat Outbreak Alert: Fake Payment Document Attachment Email Messages on November 11, 2013

Medium Alert ID: 31720 First Published: 2013 November 12 15:26 GMT Version: 1 Summary Cisco Security has detected significant activity related to spam email messages that claim to contain payment information document for the recipient. The text in the email message attempts to convince the...

Threat Outbreak Alert: Fake Payment Receipt Notification Email Messages on November 11, 2013

Medium Alert ID: 31711 First Published: 2013 November 11 20:11 GMT Version: 1 Summary Cisco Security has detected significant activity related to German-language spam email messages that claim to contain a payment receipt notification for the recipient. The text in the email message attempts to...

Threat Outbreak Alert: Fake Product Sample Request Email Messages on November 7, 2013

Medium Alert ID: 31673 First Published: 2013 November 7 20:10 GMT Version: 1 Summary Cisco Security has detected significant activity related to spam email messages that claim to contain a product request for the recipient. The text in the email message attempts to persuade the recipient to open...

Threat Outbreak Alert: Fake Product Quote Request Email Messages on November 1, 2013

Medium Alert ID: 31592 First Published: 2013 November 1 15:10 GMT Version: 1 Summary Cisco Security has detected significant activity related to spam email messages that claim to contain a product order notification for the recipient. The text in the email message attempts to convince the recipie...

Threat Outbreak Alert: Fake Payroll Alert Notification Email Messages on October 30, 2013

Medium Alert ID: 31567 First Published: 2013 October 30 19:00 GMT Version: 1 Summary Cisco Security has detected significant activity related to spam email messages that claim to contain a payroll alert notification for the recipient. The text in the email message attempts to convince the recipie...

Threat Outbreak Alert: Fake Late Invoice Notification Email Messages on October 29, 2013

Medium Alert ID: 31528 First Published: 2013 October 29 15:48 GMT Version: 1 Summary Cisco Security has detected significant activity related to spam email messages that claim to contain an invoice that is past due for the recipient. The text in the email message attempts to convince the recipien...

Threat Outbreak Alert: Email Messages with Malicious Attachments on October 28, 2013

Medium Alert ID: 31520 First Published: 2013 October 29 14:03 GMT Version: 1 Summary Cisco Security has detected significant activity related to spam email messages with a blank message body and a file attached for the recipient. The attachment contains a malicious .exe file that, when executed,...